NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#fgfm

1 stories this week · 1 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedfortimanager1 fortinet1 improper-authorization1 remote-code-execution1

2 stories, newest first · one card per story

Fortinet PSIRT1d agohigh

Unauthenticated FortiManager FGFM flaw allows code execution

An attacker who can reach the FGFM port may run code before the registration password is verified; CVSS 9.0.

fortinet fortimanager

Fortinet PSIRTAug 12, 2026

FGFM Authentication Weakening via CLI Configuration

FortiManager FGFM flaw (CVSS 7.3) lets an attacker with a valid certificate impersonate any managed FortiGate under a specific CLI option.

authentication-bypass fgfm

1